
CVE catalog
CVE-2026-75141
FFmpeg before commit acf5d7c contains a heap buffer…
FFmpeg before commit acf5d7c contains a heap buffer overflow in the hvcC box writer. When writing an HEVC configuration record with more NAL units of a single type than the count field can represent, the NAL unit count overflows, causing a heap buffer overflow. A crafted HEVC input file triggers the overflow during muxing.
- Severity
- Critical · CVSS 9.3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.20% · Oct 27, 2026
Projects and upstream resources
Reported versions and fixes
Each observation applies to its named package, distribution, and release. Distribution backports can fix a vulnerability while retaining an older upstream version number.
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debiansid | ffmpeg | 7:9.0.2-1 | FixedDistribution-reported fixed boundary | [CVE-2026-75141] |
| Debiansid | ffmpeg | 7:9.0.2-4 | Fixed | [CVE-2026-75141] |
| Debianforky | ffmpeg | 7:9.0.2-1 | FixedDistribution-reported fixed boundary | [CVE-2026-75141] |
| Debianforky | ffmpeg | 7:9.0.2-4 | Fixed | [CVE-2026-75141] |
Showing 4 fix observations. All 34 observations, including unknown and conflicting reports, are available below.
Provider details and historical evidence
| Distribution / release | Package | Version | Status | Source |
|---|---|---|---|---|
| Debianbookworm | ffmpeg | Not reported | AffectedDistribution reports no fix | [CVE-2026-75141] |
| Debianbookworm | ffmpeg | 7:5.1.9-0+deb12u1 | Affected | [CVE-2026-75141] |
| Debianbookworm-security | ffmpeg | 7:5.1.9-0+deb12u1 | Affected | [CVE-2026-75141] |
| Debianforky | ffmpeg | 7:9.0.2-1 | FixedDistribution-reported fixed boundary | [CVE-2026-75141] |
| Debianforky | ffmpeg | 7:9.0.2-4 | Fixed | [CVE-2026-75141] |
| Debiansid | ffmpeg | 7:9.0.2-1 | FixedDistribution-reported fixed boundary | [CVE-2026-75141] |
| Debiansid | ffmpeg | 7:9.0.2-4 | Fixed | [CVE-2026-75141] |
| Debiantrixie | ffmpeg | Not reported | AffectedDistribution reports no fix | [CVE-2026-75141] |
| Debiantrixie | ffmpeg | 7:7.1.5-0+deb13u1 | Affected | [CVE-2026-75141] |
| Debiantrixie-security | ffmpeg | 7:7.1.5-0+deb13u1 | Affected | [CVE-2026-75141] |
| Ubuntunoble | ffmpeg | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | ffmpeg-doc | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavcodec-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavcodec-extra | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavcodec-extra60 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavcodec60 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavdevice-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavdevice60 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavfilter-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavfilter-extra | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavfilter-extra9 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavfilter9 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavformat-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavformat-extra | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavformat-extra60 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavformat60 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavutil-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libavutil58 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libpostproc-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libpostproc57 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libswresample-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libswresample4 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libswscale-dev | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
| Ubuntunoble | libswscale7 | 7:6.1.1-3ubuntu5+esm13 | UnknownSource applicability is not established | Provider not reported |
Original provider fields
{
"package_releases": [
{
"name": "ffmpeg",
"status": "fixed",
"release": "sid",
"version": "7:9.0.2-4"
},
{
"name": "ffmpeg",
"status": "fixed",
"release": "forky",
"version": "7:9.0.2-4"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "trixie",
"version": "7:7.1.5-0+deb13u1"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "trixie-security",
"version": "7:7.1.5-0+deb13u1"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "bookworm",
"version": "7:5.1.9-0+deb12u1"
},
{
"name": "ffmpeg",
"status": "vulnerable",
"release": "bookworm-security",
"version": "7:5.1.9-0+deb12u1"
}
],
"fixed_versions": [
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "sid",
"urgency": "not yet assigned",
"fixed_version": "7:9.0.2-1"
},
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "forky",
"urgency": "not yet assigned",
"fixed_version": "7:9.0.2-1"
},
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "trixie",
"urgency": "not yet assigned",
"fixed_version": ""
},
{
"bug": null,
"name": "ffmpeg",
"type": "source",
"origin": null,
"release": "bookworm",
"urgency": "not yet assigned",
"fixed_version": ""
}
],
"distribution_packages": [
{
"name": "ffmpeg",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "ffmpeg-doc",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavcodec-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavcodec-extra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavcodec-extra60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavcodec60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavdevice-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavdevice60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavfilter-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavfilter-extra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavfilter-extra9",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavfilter9",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavformat-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavformat-extra",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavformat-extra60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavformat60",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavutil-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libavutil58",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libpostproc-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libpostproc57",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libswresample-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libswresample4",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libswscale-dev",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
},
{
"name": "libswscale7",
"distro": "ubuntu",
"ranges": [
{
"fixed": "7:6.1.1-3ubuntu5+esm13",
"introduced": "0"
}
],
"release": "noble",
"ecosystem": "deb",
"fixed_version": "7:6.1.1-3ubuntu5+esm13",
"applicability_unknown": true
}
]
}Publisher notes
[trixie] ffmpeg: Wait until fixed in 7.1.x upstream branch
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
[Debian 12 (Bookworm)]
- [ffmpeg]Unknown
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [ffmpeg-doc]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· all · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· all · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· all · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· all · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec-extra]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavcodec-extra59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavdevice59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavdevice-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter8]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter-extra]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavfilter-extra8]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat-extra]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavformat-extra59]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavutil57]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libavutil-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libpostproc56]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
- [libpostproc-dev]Unknown
Source package: [ffmpeg]
Details (4)
7:5.1.9-0+deb12u1· amd64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookwormAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· amd64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
7:5.1.9-0+deb12u1· arm64 · bookworm-securityAffected
nvd · ffmpeg · debian · bookworm; nvd · ffmpeg · debian · 12
Observed:
References
- [https://code.ffmpeg.org/FFmpeg/FFmpeg/commit/acf5d7cdc1f9ae8752c23e1ea8d7f355ed780781]
- [https://code.ffmpeg.org/FFmpeg/FFmpeg/pulls/24088]
- [https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_11659-1.json]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-75141]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-75141]
- [https://security-tracker.debian.org/tracker/CVE-2026-75141]
- [https://ubuntu.com/security/notices/USN-8716-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-2939.json]
- [https://www.vulncheck.com/advisories/ffmpeg-heap-buffer-overflow-in-hvcc-box-writer-via-hevc-muxing]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]